Could anyone please suggest me a LiveCD (Linux Based) with SSH & FTP Services. Basically I don't want to install anything on my laptop so I just want to boot LiveCD with FTP/SSH services so I can connect from other clients to it and do a FTP/SCP to/from it. Thanks

this is causing headache for a long time now. Situation: i have a virtual machine that sits behind a proxy that shields it off the internet. The Proxy seems to work fine. I want to use cURL to transfer (-T) a ZIP file to a FTP on the internet. The FTP Server requires FTPS i.e. SSL/TLS to be used. From my Windows machine i can use the same Proxy (and same proxy credentials) within TotalCommander to succesfully establish a FTPS session to the FTP Server i want to use. So i think FTP server as well as Proxy Server are configured OKAY for the purpose. What i try: Basically i try variations of the follow commandline: curl -vvv --ssl -T /path/to/my/file.zip ftp://my.ftpserver.com:21 --user USER:PASSWORD -x https://proxyuser:proxypass@local.proxyserver.mycompany.com:3128 I see in the verbose output, that cURL can authenticate against the proxy and tries to connect to the FTP Server. However, it keeps getting an error from SQUID (the proxy) that Squid sent the following FTP command: USER myftp user The server responded with: You must issue the AUTH command to change to an encrypted session before you can attempt to login. 550-This server requires encryption When i change the destination **to use ftps:// instead of ftp://** it keeps telling me curl: (35) gnutls_handshake() failed: An unexpected TLS packet was received. When i look into the log of the Totalcommander FTP session, i see that it authenticates against the Proxy. Then connects to the FTP Server and then changes to secure mode for Authentication. 220-Welcome to Company-FTP 220 Company-FTP Server ready! AUTH TLS 234 Changing to secure mode... (cert stuff) USER myftpuser 331 Username OK. Need password. PASS ********** 230 Password oK. Connected. logged in .... What could i possibly do wrong here? I researched this a bit and found a post in the curl mailing list that "--tlsv1" option should send "AUTH TLS" first before "AUTH SSL", however i do not think it is done, because even if i use the --tlsv1 switch, Squid will comeback with the same error message saying that it send "USER myftpuser" and got that 550 error back. Is there a way to force cURL to send this "AUTH TLS" that Totalcommander seems to send and then auths succesfully? Thanks a lot aslmx

I have configured VSFTPD in a CentOS machine to run on two instances, with vsftpd.conf and vsftpd2.conf. Here is the content of the second conf file: anonymous_enable=NO chroot_list_enable=YES chroot_list_file=/etc/vsftpd/chroot_list chroot_local_user=YES connect_from_port_20=YES dirmessage_enable=YES force_local_data_ssl=YES force_local_logins_ssl=YES ftpd_banner=Hello. listen=YES listen_port=30 local_enable=YES local_umask=022 pam_service_name=vsftpd pasv_enable=YES pasv_address=192.168.100.162 pasv_max_port=389 pasv_min_port=389 rsa_cert_file=/etc/vsftpd/vsftpd.pem ssl_enable=YES ssl_sslv2=NO ssl_sslv3=NO ssl_tlsv1=YES ssl_ciphers=HIGH user_config_dir=/etc/vsftpd/user_conf userlist_enable=NO write_enable=YES xferlog_enable=YES xferlog_file=/var/log/xferlog2 xferlog_std_format=NO dual_log_enable=YES log_ftp_protocol=YES The first conf file is identical excepting the xferlog file, the listen_port that is missing, and the pasv_max_port/pasv_min_port that are 65000/60000 So I have one FTPS working on port 21 and the other on port 30. Both are working fine, but I want to make sure that 389 is really being used. So, I started a session with Wireshark, where I could see all my TCP packets to port 30, but no one to 389. Instead, I see packets to my remote server on port 49276. How can I make sure that this is working fine?

I'm using QEMU to run debian linux on my windows machine. I setup a filezilla ftp server running on localhost in my windows. I can connect to the ftp server from my windows cmd But i can't connect to ftp server in localhost from my debian linux in qemu I can't connect to localhost, but strangely i can connect to website in internet I don't understand, i can connect to internet but i can't connect to localhost? this gave me the impression that QEMU might be blocking localhost connection, but i'm not entirely sure whether this is true nor why. I'm trying to use ftp to transfer file from my windows to my qemu and vice versa (because i tried other method to share file and no success). Does anyone know how to fix this problem ??

I know this question is posted many times on StackExchange, but none of the solutions worked for me. I use vsftpd server on ubuntu and I want to restrict the access (read-only) for a user to a given subdirectory only. Most of the solutions I found said that changing the home-directory of a user does the job: usermod -d /home/subdirectory with previously setting in /etc/vsftpd.conf: local_enable = YES chroot_local_user=YES chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list and add the username to /etc/vsftpd.chroot_list. Anyway, this works fine if I use a browser. It directs me to the given home directory and I cannot access its parents. The problem is when I use FileZilla. I connect directly to the home directory but I can also see and access the parent directories (and files within). I also tried some other solutions using sftp with editing the file /etc/ssh/sshd_config and using internal-sftp, but also doesn't work.

So there is a user that was created by root, and it pretty much has access to most/all directories on the system, we want to use this user only for ftp via lftp to read a certain file on the server that this user is located, let's call it config-server. so all the other servers, have scripts that will use lftp/ftp to access the config-server using this user to read the desired config file. As the user and password will be saved on the other servers, we want to restrict this users access to all other unnecessary directories, and no we don't want to restrict the users ftp access, we want to restrict the user itself. My goal is to do it at once or at least once for each mount point, like configuring his /her access globally once to 000, then go the the desired directory and give him read access to that directory only. so how can I do this globally? is it possible? I thought I could use recursive chmod/setfacl on all directories/mountpoints while signed in as root, and then as root, give that user access to the config files path? is this a viable solution, or does it have risks. if not, please share your solution. Note: We have somewhat 74 servers, which nullifies the point of storing the config on each server separately. EDIT: Server OS is Redhat 6.9 (or later for other servers). Also the access method used in the script would be ftp, but like I said since the user and password is present in the scripts that are on the other servers, we should prevent the user overall access, some one might use ssh, or even direct login, and we can't be held responsible for allowing that to happen, also we have limited access to most of our servers (configuration wise), this is one of the few which we do have the root access and OS is not managed by another team. But we ourselves will need to be able to login to this user ( can't complicate it too much, not every member that is added to the team has good linux/OS knowledge Ironically, right now two new members, trained by me and my ex-colleague in linux, one which is IT student, still didn't know what command is used to switch user, both use right click to copy and paste :| ).

I have a user on my server (Debian) that I will be using for FTP. For a given directory on the file system, he is able to create directories/create files.

myuser@debian-server:/storage$ su ftp_accesser
Password: 
ftp_accesser@debian-server:/storage$ echo "foobar" > foobar.txt
ftp_accesser@debian-server:/storage$ mkdir -v foobar2
mkdir: created directory 'foobar2'
ftp_accesser@debian-server:/storage$ ls -l
total 448380
drwxr-xr-x 2 root         root              4096 Mar 25 19:32 other_dir
drwxrwxr-x 2 ftp_accesser ftp_accesser      4096 Apr  9 11:32 foobar2
-rw-rw-r-- 1 ftp_accesser ftp_accesser       7 Apr  9 11:31 foobar.txt

ftp_accesser@debian-server:/storage$

I am also running the vsftpd server on this server. I attempt to do the same thing as above (with the files removed, of course) using the ftp client.

Connected to localhost.
220 (vsFTPd 3.0.3)
Name (localhost:myuser): ftp_accesser
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> cd /storage
250 Directory successfully changed.
ftp> mkdir foobar3
550 Permission denied.
ftp> put /home/myuser/foobar.txt foobar.txt
local: /home/myuser/foobar.txt remote: foobar.txt
200 PORT command successful. Consider using PASV.
550 Permission denied.
ftp>

Is there a way to allow ftp_accesser to put/mkdir files onto the server?

My attempts to transfer a file to a remote Windows 7 computer have failed: - TeamViewer times-out - WinSCP times-out I am forced to re-start (vs. resuming) transferring the files. I have temporarily positioned the file on my Linux router and opened the SSH port for WinSCP. I can periodically access the remote (Windows 7) computer and WinSCP is available. It would be nice if WinSCP had rsync built-in. Is there a robust (can resume session disconnects) file transfer protocol or app that will persistently reconnect until the transfer is completed (through SSH port 22)? - Update: SFTP retrieved via ipkg to Linux router: SFTP tested and confirmed - Update: Only the SCP connection over port 22 connected.

I have a minimal install of Centos in VirtualBox. I want to run a ftp service to share files between the host and my VM, and then learn about ftp servers. I installed vsftpd and changed the vsftpd.conf file as bellow: anonymous_enable=NO local_enable=YES write_enable=YES local_umask=O22 dirmessage_enable=YES xferlog_enable=YES connect_from_port 2O=YES xferlog_std format=YES chroot_local_user=YES listen_ipv6=YES pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES But, when I type service vsftpd start I get the following error: > _Job for vsftpd.service failed because the control process exited with error code. See "systemctl status vsftpd.service" and "journalctl -xe" for details._ Is this issue happening due of a wrong config as showed above, or is it something else? What can I do to start my ftp server? **EDIT** Output of systemctl status -l vsftpd.service [user@localhost vsftpd]$ systemctl status -l vsftpd.service vsftpd.service - Vsftpd ftp daemon Loaded: loaded (/usr/lib/systemd/system/vsftpd.service, disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Ter 2017-05-09 21:03:19 -03; 3min 2s ago Process: 3047 ExecStart=/usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf (code=exited status=2) Mai 09 21:03:19 localhost.localdomain systemd: Starting Vsftpd ftp daemon... Mai 09 21:03:19 localhost.localdomain systemd: vsftpd.service: control process exited, code=exited status=2 Mai 09 21:03:19 localhost.localdomain systemd: Failed to start Vsftpd ftp daemon. Mai 09 21:03:19 localhost.localdomain systemd: Unit vsftpd.service entered failed state. Mai 09 21:03:19 localhost.localdomain systemd: vsftpd.service failed. [user@localhost vsftpd]$

I need to set up a FTP server within my Ubuntu virtual box but I'm having problems within configuration of the config file within VSFTPD From online tutorials I keep seeing different options being selected and different reasoning, I just need a simple and secure configuration without enable settings I do not understand. So far I have selected to use the following options within **/etc/vsftpd.conf**

Listen=NO
Anonymous_enable=NO
Local_enable=YES
wrtite_enable=YES
dirmessage_enable=YES
use_localtime=YES
connect_from_port_20=YES
xferlog_enable=YES
ftpd_banner=Welcome to Toms FTP Server.
chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list

From my understanding these options do the following: * listen enables standalone, * anonymous denies non verified login, * write_enable allows to write files, * dirmessage_enable is directory explaining, * use_localtime is the time used for dating files, * connect_from_port_20 is self explanatory, * xferlog_enable is a log creation/format type?, * ftpd_banner is self explanatory, * chroot_local_user specifies users are restricted to their directory, users not restricted to their directory are listed within chroot_list_file. The problem I am having is, I keep seeing references in tutorials regarding a userlist which will state which users do have access like this:

user_sub_token=$USER
local_root=/home/$USER/ftp
userlist_enable=YES
userlist_file=/etc/vsftpd.userlist
userlist_deny=NO

This does not exist in my file and whenever I try to enter it manually it causes my VSFTPD to fail start up when restarting, I see this in almost every tutorial but it is not contained within my configuration files??? Am I trying to configure this wrong? What is the minimum requirements for a safe VSFTPD configuration? Is this user list no-longer supported? Do I even need this user list? error code also does not disappear removing these files and restarting again, it completely breaks the service and requires a re installation every single time, the error code is as follows:

systemctl status vsftpd.service

● vsftpd.service - vsftpd FTP server
   Loaded: loaded (/lib/systemd/system/vsftpd.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2020-04-26 13:58:09 UTC; 14min ago
  Process: 30588 ExecStart=/usr/sbin/vsftpd /etc/vsftpd.conf (code=exited, status=2)
  Process: 30584 ExecStartPre=/bin/mkdir -p /var/run/vsftpd/empty (code=exited, status=0/SUCCESS)
 Main PID: 30588 (code=exited, status=2)

Apr 26 13:58:09 ubuntu systemd: Starting vsftpd FTP server...
Apr 26 13:58:09 ubuntu systemd: Started vsftpd FTP server.
Apr 26 13:58:09 ubuntu systemd: vsftpd.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Apr 26 13:58:09 ubuntu systemd: vsftpd.service: Failed with result 'exit-code'.

My limited skills/knowledge tell me that standard FTP is completely unencrypted and that it only takes minutes (or even seconds) for your system to be compromised if you send admin credentials unencrypted over the internet. In addition, they just sent me the admin credentials in a standard email, which is also a security violation in my world. What should I do? Go ahead with FTP as I am told, or choose a different approach? -------- Thanks all for your advice and insights! I had the gut feeling that these people have no security awareness at all and that the only sensible thing to do is to move, just as you suggest. Thank you for confirming that!

I installed OpenBSD and then proceeded to download firefox using the PKG_PATH environment. It worked and seemed to run reasonably well but then, wanting to try another browser, I deleted firefox using pkg_delete (which of course wasn't necessary). I now find myself unable to download any browser as for some reason the system now doesn't recognize any ftp server I try to connect to. Every time I try to using 'export PKG_PATH', I get the message 'no such directory'. Any hints at what happened and what I might do ?

I love linux because I get control over my system. But I do herald from the school of mac, where things are simple, beautiful, and powerful. I like it that way, as opposed to having lots of knobs and levers and everything. **Does anyone know of a strong FTP client for linux that is in the vein of Panic's Transmit?** It's my choice FTP software in Mac OS, but I doubt I need to convince anyone here that I don't want to DEVELOP web apps in OS X. It's a pain, imo. Currently I use Filezilla. It works fine. But it's UI is a mess, imho.

I installed pure-ftpd on Debian (Raspberry Pi), found the config file and managed to do basic configuration, disallow anonymous login, create a virtual user, call pure-pw mkdb and restart the server. But I can't login with this user. Instead I can login with a regular Linux user. I would like to reject regular users and only accept virtual users. I found that I should start the server with the -l parameter that specifies which logins should be accepted. This sounds great - if only I could find where the server is started. There is nothing in init.d and other known (to me) places that do such automatic daemon starts. As far as I know I did nothing to activate the daemon, this must have happened at the installation process. If someone could tell me where pure-ftpd is started, perhaps this would solve both of my problems. I wonder why a lot of stuff can be configured in the config file but such basic configuration like which users to accept must be set in a completely different way. What is the reason? Is pure-ftpd not the best choice for an ftp server that only should accept dedicated users with no relation to system users? #### Why FTP? I want to transfer images from my smartphone to the Raspberry Pi in the internal network, not accessible from outside. So FTP seems to be a good choice, especially because I expect a server that is described as "designed for security" to provide encrypted transfers too. With original configuration it seems to be open to every Linux user which makes me doubt this security a bit. #### Why this FTP server? I tried other FTP servers too but I didn't like they are tied to normal users. I don't want to add system users and assign home directories to them. I simply want to add two FTP users that can access one directory and save files as the user of this directory. I am not (yet) sure if this works, I'm going step by step and I am hanging at the virtual users for now. Documentation is not hard to find but most appears incomplete to me. In this case they all tell how to add a virtual user, but I had to search a while until I found I have to activate that. But no comment about *where* to activate that.

I want to setup like mentioned, where I can create multiple ftp users with having same home directory. What I have tried so far: I created a new user with pointing to the directory of ftp user as home, but as new user is not owner of that directory connection is refusing I guess. I have also tried to manage this using soft link, like I have created soft link of original ftp directory and mapped that links as home of individual user's home directory. I know if I create all home directory separately for all ftp users then this will work, right now my FTP user and apache user both are same, so file I am uploading apache get its execution permission by default, but if I separate out users and if I will uploading file using another user which is not mapped with apache, will apache able to execute that file?

I would like to backup some of my very important data on a remote machine. Currently I'm just saving it to my local machine by using this command: tar -cvjf ~/backups/Backup.tar.bz2 ~/importantfiles/* I would prefer not using another command to transger it to the remote machine, meaning I would like to just have this command being upgraded so it can transfer the data to the remote machine. This is designed to be in a script later that is suposed to run on its own, meaning any type of required user input would completly mess it up! Something like tar -cvjf sftp://user:pwassword@host/Backup.tar.bz2 ~/importantfiles/* tar -cvjf ftp://user:pwassword@host/Backup.tar.bz2 ~/importantfiles/* would be perfect! (No pipes (etc.), just one command!)

$ ftp example.com 51225 Connected to example.com. 220 ProFTPD Server ready. $ Name (example.com:ra): me@mydomain.com 550 SSL/TLS required on the control channel ftp: Login failed. Remote system type is UNIX. Using binary mode to transfer files. Neither man ftp nor ftp --help give me the slightest clue

I have a USB drive connected to my router to access files remotely, and it can use ftp to connect (not ssh or sftp). I have the router login set to the same login as my desktop computer, and I can use Nemo to connect to the server for file transfers only if I set the ftp login to use the same login as my main router login. But, I have the option to set up an alternate login, which I'd like to do so I don't need to give out the router login to anyone. However, Nemo will not connect using either "Connect to server" or typing in a URL in the address line. It will only connect if the login name and password are the same as the computer. I believe there is some protocol for using your existing login for an external device. It's obviously not the router, as I can connect as expected using my phone's file manager (FX on Android). EDIT: I tried using a windows share option, and had the same problem. Something about sending the login information doesn't work, except when it's the system's login info. Even using user:password@address doesn't work; it prompts for a password, but the command it sends is screwed up.

I'm currently managing two physical servers, both running Red Hat Linux 8. The primary server is configured with the OS on bare metal, whereas the secondary server utilizes Hyper-V for virtualization. Both servers are dedicated to a single service, FTP, which has recently been experiencing issues. Given that these servers are in a live production environment, I am exploring alternatives to FTP that could offer improved reliability and performance. Could you please suggest any viable replacements for FTP, considering the current setup of my servers? Your advice would be greatly appreciated. Thank you.

I have created one Linux CentOS 6 instance in Amazon EC2 and installed cPanel on it and started running my websites there. The issue I face was when I try to FTP to the instance with the following config IP : Instance IP Username : centos Password : Blank Mode : SFTP SFTP Key : Private KEY (PEM) Provided by Amazon EC2 dashboard I got to view only > /home/centos directory But I want to view the main directory which is back to home directory When I tried to click > .. in FileZilla it says > "Permission Denied" So I tried the following > vipw /etc/passwd and changed > centos:x:1000:1000:Cloud User:/home/centos:/bin/bash to > centos:x:1000:1000:Cloud User:/ :/bin/bash and even to > centos:x:1000:1000:Cloud User: :/bin/bash However , after this change FTP stopped logging in Finally, I reverted back to > centos:x:1000:1000:Cloud User:/home/centos:/bin/bash Kindly guide me to achieve this.